The port you need to open is 17605.
As far as why the Web Console does not talk directly to the database, that is to allow for extensibility. The addition of an abstraction layer ensures every user that accesses the Web Console is not directly hitting the database.
The port information will be added to the next APM release notes and will be included in the next version of APM in the Administrator Guide.
Hope that answers your questions.